Privacy policy

GetPicked is operated by an individual based in Thailand. In this policy “we” means the operator of the GetPicked service. We decide what data is collected and why, so for GDPR and UK GDPR we are the controller.

Questions and requests go to hello@getpicked.app. The operator reads every one and replies within 24 hours on weekdays (GMT+7).

Today, while GetPicked is a waitlist:

• Waitlist sign-ups: your email, the domain you typed (if any), the plan you're interested in, the page you signed up from and any campaign tags in the link, and whether you ticked the box for tips.
• Bot checks: Cloudflare Turnstile checks that a person is filling in the form. See Cloudflare Turnstile below.
• Server logs: Vercel, our host, logs each request with your IP address for its own security and debugging.

When the free tools open, we also collect:

• Tool inputs and results: the domains, URLs, competitors and text you enter, and what the tool found.
• A hashed IP address: we combine your IP with a value that changes every day and store only the result, to enforce daily limits. We never store the IP itself, and the daily value is thrown away, so the hash can't be turned back into your IP.
• Your email, if you enter it to see full results. We send a 6-digit code to check it's yours.
• Files you upload to the Backlink Analyzer. They stay private to your workspace (see Uploaded files).
• Usage events, such as “tool run finished”. They carry an internal id, never your email.

When paid plans open, Paddle handles payment. We receive your plan, billing country and subscription status, never your card number.

• To run the service you asked for (contract): show results, save them to your account, send the code and results email, take payment.
• To keep it working and fair (legitimate interests): daily limits, abuse checks, error reports, and counting which tools get used so we know what to fix.
• To send tips by email (consent): only if you ticked the box, which is never ticked for you. Every tips email has an unsubscribe link.
• To meet legal duties (legal obligation): tax and payment records, kept by Paddle as the seller.

We don't sell your data, and we don't use it to show you ads.

Our crawler, GetPickedBot, reads public “best tools” articles and directory pages. We keep the links on each page, its title and dates, not the page itself. We keep an article's author name only so you know who to pitch, and we don't collect personal email addresses from pages. How GetPickedBot works, and how to opt your site out.

Your file stays private to your workspace. We only add a link to our shared database after we've checked it ourselves. Metrics from other vendors in your file (such as domain ratings or traffic) are only ever shown to your workspace.

The Pitch Grader and AI Visibility Check send text to Google's Gemini API. Before paid plans open we use Gemini's free tier, where Google's terms let it use prompts to improve its products. So don't paste anything private into the Pitch Grader; the tool says so next to the box. We don't send your saved data to Gemini.

These companies process data on our behalf, under their own data processing terms. Each one gets only what it needs for the job listed.

Our forms use Cloudflare Turnstile to tell people from bots, usually without a puzzle. To do that, Cloudflare collects your IP address and signals from your browser and device while the check runs. Its use of that data is covered by the Turnstile Privacy Addendum.

Our database runs in the United States (Supabase, us-east-1). Some processors in the list work from other countries too. When data leaves the UK or the EU, we rely on each processor's standard contractual clauses or an equivalent safeguard.

• Free-tool sessions with no email: deleted after 30 days, with their tool runs.
• Waitlist entries: until the service launches and we've emailed you, or until you ask us to remove you.
• Accounts: until you delete the account. Deleting it removes your profiles, tool runs, uploads and saved opportunities.
• Payment records: kept by Paddle for as long as tax law requires.

Links our crawler saw for itself stay in our shared link data after you leave, because they describe public web pages, not you.

You can ask for a copy of your data, ask us to correct it or delete it, object to how we use it, or withdraw consent for tips emails at any time. Once accounts exist, export and delete are buttons in your account settings. Until then, email hello@getpicked.app from the address you signed up with and we'll do it within 30 days.

If you're in the UK or the EU and think we've handled your data badly, you can complain to your data protection authority (in the UK, the ICO). We'd like to hear from you first.

We use only the cookies the site needs to work, plus analytics cookies if you accept them. The cookie notice lists each one.

GetPicked is a business tool and isn't meant for anyone under 16.

When we change what we collect or who processes it, we update this page and the date at the top. If you have an account, we email you before a change that affects you takes effect.